1. Data Controller
Enllava (enllava.com), operated in the Dominican Republic, is the data controller responsible for personal information collected through the website, contact forms, listings, and customer support channels.
For inquiries or to exercise your data protection rights, you can contact our privacy team via email or our official WhatsApp support channel.
2. What Data We Actually Collect and When
We only collect data strictly necessary to provide our marketplace services across all verticals:
- Account & Profile Data: Full name, email address, phone/WhatsApp number, profile photo, and preferences via email registration or Google OAuth.
- Vehicle Listing Data: Make, model, year, price in DOP/USD, mileage, transmission, fuel, province/municipality, photographs, and condition (without publishing private VIN numbers or full license plates).
- Property Listing Data: Property type, province, sector, lot/built area, bedrooms, bathrooms, parking spots, price in DOP/USD, photographs, and amenities.
- Business Listing Data: Commercial category, province/municipality, property type, price in DOP, declared financial metrics (revenue, rent, inventory), and photographs.
- Buyer Inquiries (Leads): Name, email, WhatsApp number, and inquiry message submitted when contacting a seller, dealer, or agency.
- Verification Documents (Optional): National ID (Cédula) / Passport, vehicle title (matrícula), property title, or DGII tax registry (RNC) uploaded voluntarily for badge verification.
- Technical Data: Anonymized IP addresses, browser types, technical error logs (Sentry), and saved favorites stored in browser storage.
3. Legitimate Purposes for Data Processing
We process personal data solely for legitimate purposes:
- Managing user accounts, publishing listings across all 3 verticals, and syncing user favorites.
- Facilitating direct WhatsApp and phone introductions between prospective buyers and sellers, dealers, or agencies.
- Verifying identity and asset documentation when a verification tier is requested.
- Providing user support, answering questions, and preventing fraud or impersonation on the platform.
We do not sell, rent, or trade your personal data to third-party advertisers.
4. WhatsApp Communications and Phone Calls
WhatsApp is the primary communications channel in the Dominican Republic. By providing your phone number, you authorize Enllava to contact you via WhatsApp strictly for listing notifications, inquiry coordination, or support.
WhatsApp is provided by Meta Platforms, Inc. and is governed by its own privacy terms.
5. Security and Supabase Storage Architecture
We apply technical and organizational security controls:
- Row Level Security (RLS): Database-level PostgreSQL policies ensure users can only access their own private data.
- Private Encrypted Storage for Documents: Identity, vehicle title, and RNC verification documents are stored in private buckets accessible only by authorized evaluators via time-limited signed URLs.
- Encryption in Transit: All website traffic is secured with SSL/TLS HTTPS encryption.
6. Technology Providers and Cloud Infrastructure
We partner with enterprise cloud providers (Supabase for auth and database, Vercel for hosting, Sentry for technical reliability) who act as data processors under strict security and confidentiality commitments.
7. Your ARCO Rights under Law No. 172-13
Under Dominican Law 172-13, you hold the following rights:
You may exercise these rights at any time by contacting our support email or WhatsApp with proof of identity.
8. Data Retention and Policy Updates
We retain data as long as your account is active or as necessary to fulfill legal obligations in the DR. We may update this policy periodically to reflect platform enhancements.